Microsoft Plans 2 Security Bulletins for Patch Tuesday
Microsoft has a small Patch Tuesday planned for May that features just two critical bulletins. Neither bulletin addresses a SharePoint security issue on which the company released an advisory April 29.Microsoft has a small Patch Tuesday planned for this month. The company said it will ship two security bulletins May 11 to fix vulnerabilities in Windows, Office and Visual Basic for Applications. Both bulletins are rated critical and cover vulnerabilities that leave users open to remote code execution by attackers. "Windows 7 and Windows Server 2008 R2 customers will be offered the Windows-related update but they are not vulnerable in their default configurations," noted Jerry Bryant, group manager of Response Communications for Microsoft Security Response Center.
Missing from the lineup is a patch for a cross-site scripting flaw affecting Office SharePoint 2007 and Windows SharePoint Services 3.0 that was reported the week of April 26. Bryant said the company is still working on an update to address the issue, and recommended that users try the workaround contained in the advisory issued April 29.